Arpine Maghakyan

Arpine Maghakyan

Security Researcher of RedRays.

December 4, 2009
3:06 pm

Security note aco_bsp_admin Start only with ICF auth., SAP security note 1161689

Description

You want the BSP application aco_bsp_admin to be called only by users that have ICF authorization.

Available fix and Supported packages

CPROJECTS | 300 | 300
CPROJECTS | 310_620 | 310_640
CPRXRPM | 400 | 400
CPROJECTS 310_620 | SAPK-31215INCPROJECT |
CPROJECTS 310_640 | SAPK-31415INCPROJECT |
CPRXRPM 400 | SAPK-40013INCPRXRPM |

Affected component

CVSS

Score: 0

Exploit

Exploit is not available.
For detailed information please contact the mail [email protected]

URL

https://launchpad.support.sap.com/#/notes/1161689

TAGS

#This-problem-is-caused-by-a-program-error.

More to explorer

Time to give back, RedRays

RedRays Offers Support to Startups Listing on SAP Store

February 26, 2023

RedRays is a startup that was founded in January 2021. Throughout our journey, we have been fortunate to receive support and guidance

Threat Modeling: An Overview of PASTA Methodology

February 23, 2023

I would like to briefly introduce the Threat Modeling methodology in this blog post. This will be the initial part of the

SAP Security Patch Day – February 2023

February 14, 2023

SAP Security Patch Day is a monthly event during which SAP releases security updates for their software products. These updates address potential

3242933 – [CVE-2022-39802] File path traversal vulnerability in SAP Manufacturing Execution

October 12, 2022

General information Risk: CRITICAL Versions Affected:SAP MFG EXECUTION CORE 15.1SAP MFG EXECUTION CORE 15.2SAP MFG EXECUTION CORE 15.3Vendor URL: https://sap.comBug: File path traversal